Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/Ha68w6QiFH0a19bRsN7VKHOmArA.roa
File: Ha68w6QiFH0a19bRsN7VKHOmArA.roa (raw, json)
Hash identifier: Jmj2H9NopKmp/RZPRAfw4d/aDmmbdfv4gl5rsbtGGVA=
Subject key identifier: 1D:AE:BC:C3:A4:22:14:7D:1A:D7:D6:D1:B0:DE:D5:28:73:A6:02:B0
Certificate issuer: /CN=f0c104041691dc384f3b1a8cdf95c96628ea6daf
Certificate serial: 019DD8BB08B2048D8D05B914511FC7280F0C
Authority key identifier: F0:C1:04:04:16:91:DC:38:4F:3B:1A:8C:DF:95:C9:66:28:EA:6D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8MEEBBaR3DhPOxqM35XJZijqba8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/Ha68w6QiFH0a19bRsN7VKHOmArA.roa
Signing time: Wed 29 Apr 2026 10:13:49 +0000
ROA not before: Wed 29 Apr 2026 10:13:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202391
IP address blocks: 95.38.144.0/22 maxlen: 22
95.38.148.0/23 maxlen: 23
95.38.148.0/24 maxlen: 24
95.38.149.0/24 maxlen: 24
95.38.150.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.mft
rsync://rpki.ripe.net/repository/DEFAULT/8MEEBBaR3DhPOxqM35XJZijqba8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 21:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d8:bb:08:b2:04:8d:8d:05:b9:14:51:1f:c7:28:0f:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0c104041691dc384f3b1a8cdf95c96628ea6daf
Validity
Not Before: Apr 29 10:13:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1daebcc3a422147d1ad7d6d1b0ded52873a602b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:f3:26:c4:bc:5e:3c:65:26:c8:79:bc:c3:c4:
50:fe:56:44:f5:ad:53:8c:82:15:1b:dc:e7:b7:cc:
55:8b:cf:eb:70:37:42:c9:5f:2a:97:f1:2d:4e:d8:
3d:23:eb:33:54:13:1f:cc:26:6b:65:d4:94:be:bf:
04:ab:e7:53:21:a5:e8:a4:9d:e7:99:84:84:e8:2c:
d6:d4:f7:02:19:e5:37:12:9d:bb:77:89:02:b3:1c:
cc:f4:d0:94:9c:b6:73:d3:0f:19:3b:30:f2:49:ab:
f8:f3:af:34:d9:d3:24:f6:e6:c1:a9:6f:4d:9e:fb:
b6:e7:b7:8f:7d:f7:28:e5:84:59:7d:cb:00:72:e4:
41:4f:fd:1c:89:ba:b1:ae:04:0f:f2:6e:88:45:f3:
11:e1:6d:f7:3a:6c:08:07:79:0e:b8:91:f5:05:f6:
94:3c:20:60:1d:d9:b6:22:b1:cb:2b:62:f8:c3:d8:
69:65:31:47:42:0b:88:01:3e:19:6b:d8:c6:31:6c:
ec:44:5c:4c:f0:ae:aa:0c:a4:b4:80:16:e8:d0:be:
b6:b1:57:2b:a9:96:92:eb:07:0a:ce:1f:5d:00:cb:
1c:72:da:b3:6c:6e:da:37:b0:84:3b:a7:d4:5e:8e:
c1:84:6b:fd:d0:95:12:c9:db:68:d2:01:99:3b:84:
7a:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:AE:BC:C3:A4:22:14:7D:1A:D7:D6:D1:B0:DE:D5:28:73:A6:02:B0
X509v3 Authority Key Identifier:
keyid:F0:C1:04:04:16:91:DC:38:4F:3B:1A:8C:DF:95:C9:66:28:EA:6D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8MEEBBaR3DhPOxqM35XJZijqba8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/Ha68w6QiFH0a19bRsN7VKHOmArA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.38.144.0-95.38.150.255
Signature Algorithm: sha256WithRSAEncryption
8f:d1:6f:cb:3a:08:55:81:fc:b9:fe:f6:e3:a7:7c:93:8f:5b:
73:8d:c2:16:9a:98:7b:48:68:86:ff:4f:a6:4e:7a:af:94:40:
f5:9b:f0:23:e4:80:bc:53:38:84:c1:1a:d3:42:0d:c1:20:71:
c8:86:45:c8:13:70:c6:49:cf:31:d5:f7:6f:44:41:0a:3e:30:
97:96:7c:3e:2d:45:cf:73:f4:19:4a:c4:df:96:b5:ab:40:3e:
d1:0c:ed:d2:7c:55:8f:5c:44:f3:57:d1:56:40:83:9a:35:44:
d2:25:18:01:e8:b8:70:29:e5:c8:26:8e:4d:9c:4e:22:9e:4b:
f5:56:4d:f7:0c:8d:d0:09:8a:80:9c:21:1e:03:1c:aa:82:97:
67:86:98:26:c9:cf:7f:df:eb:77:81:75:5d:11:77:78:33:56:
0c:30:88:f5:ad:fa:0e:cf:a1:46:42:7a:9e:47:a9:20:4a:23:
e3:7a:94:60:06:e4:0a:a2:ac:0c:58:2f:8b:f4:36:f1:0b:b5:
cb:8e:d5:dd:86:03:40:29:cf:16:0a:d1:4d:f6:92:b7:92:0d:
81:f4:4f:55:61:ce:9a:d8:e9:02:f2:c2:a5:48:c9:a7:71:9b:
ae:28:ce:e5:3f:60:58:4a:51:54:9e:1b:25:23:b6:4a:81:71:
ac:85:29:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:09:42 2026 by rpki-client